$ rpki-client -vvf rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft File: ZI5HI0RBcbar4W19wDDonAbwUNw.mft (raw, json) Hash identifier: g81/1kEos53GDad0306deB3OZVZOL0ALL7v7R5WU254= Subject key identifier: 41:DA:AF:E7:F7:9B:37:C0:D3:54:78:99:6A:F2:E6:C4:15:C8:2B:93 Authority key identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC Certificate issuer: /CN=A91408BE/serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Certificate serial: 0B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft Manifest number: 0B37 Signing time: Fri 22 Aug 2025 19:18:47 +0000 Manifest this update: Fri 22 Aug 2025 19:18:47 +0000 Manifest next update: Fri 29 Aug 2025 19:18:47 +0000 Files and hashes: 1: ZI5HI0RBcbar4W19wDDonAbwUNw.crl (hash: 2M7zLVOy9CsMmVH5tCI8mpdzJwrtNkrfkdLxcY9lX9I=) 2: 5DCB0A0C410C11EA8A6C412DC4F9AE02.roa (hash: J/8oDeRELdGOcwKCSIyZI2ucZRyx8ILa8bbFd/o79oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91408BE, serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Validity Not Before: Aug 22 19:18:47 2025 GMT Not After : Aug 29 19:18:47 2025 GMT Subject: CN=68a8c297-2283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:62:23:03:8c:af:90:98:41:fa:a7:38:a0: df:0b:8b:0d:9b:fa:9d:9e:16:3d:b2:8c:aa:81:e2: ce:b8:4f:dc:4b:c2:98:71:13:e6:df:5f:99:68:a4: 82:32:eb:1a:3c:a0:3c:db:8b:b2:3f:c3:bb:07:52: cb:c6:f5:9b:63:bb:fd:80:2f:2f:cd:f5:09:e2:a2: fd:bd:22:61:b5:a8:72:d7:73:58:b4:ce:a0:d3:02: 80:be:67:12:09:26:f9:9c:5b:5a:ab:73:65:d3:69: 61:e7:23:c6:92:1f:49:c6:53:d2:c6:5b:ae:d5:50: ad:85:3f:03:99:7c:cc:24:62:02:82:24:5a:f2:65: d6:97:c0:c0:76:7d:53:9b:29:38:c1:8c:df:3c:67: 7f:ca:d2:e8:ed:ad:2d:7c:9e:e1:a5:76:a3:07:d6: 60:f4:78:74:85:1c:e7:ed:ea:00:56:6e:70:23:e4: b6:f6:b4:49:1b:e8:39:5d:2f:93:24:a6:12:81:d1: 72:5d:06:fb:3c:1e:11:2f:5d:18:64:2c:d4:3a:80: 29:94:f9:60:d1:7c:e6:59:72:f1:11:eb:8e:87:e9: fb:bc:bc:4e:2f:1b:fc:e1:aa:32:58:f7:58:d6:13: 3b:e8:2b:30:b3:c1:96:30:67:ef:34:e5:77:2d:28: 82:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DA:AF:E7:F7:9B:37:C0:D3:54:78:99:6A:F2:E6:C4:15:C8:2B:93 X509v3 Authority Key Identifier: keyid:64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d0:63:f1:36:a9:b3:a8:03:43:30:9e:cc:0c:f2:22:76:27: 0e:69:70:76:5b:03:ea:38:cc:b2:f6:0a:a5:44:5b:e4:b2:54: 6b:69:10:83:71:49:29:9d:36:f8:99:0e:68:8c:fd:7a:54:74: 62:e8:f4:32:2b:79:02:d7:cd:b4:65:60:b0:30:28:a9:92:36: f6:4d:f1:b4:bf:a8:2a:76:e5:1a:29:47:6f:e0:5d:85:06:e0: 39:47:95:21:72:13:08:6b:b4:f2:0f:bd:1c:a5:22:8f:ca:4f: a7:57:44:d9:99:b2:4b:f7:a4:2a:6b:6d:20:3c:61:d8:8a:0d: 63:b8:2c:61:f3:9a:2d:62:2c:6d:d1:60:75:c7:6b:ba:39:90: 3e:b0:40:4c:5e:e5:be:f9:8e:6e:3e:db:3a:06:14:00:1e:81: 6e:56:47:e3:70:1c:02:40:ad:93:57:45:bc:62:9e:79:87:ae: 51:d4:70:c0:dd:c6:3c:69:e7:fa:39:ad:67:29:29:d2:b4:2d: 74:a2:df:e8:b5:25:d1:e2:39:0c:bd:5a:a9:d0:41:4a:81:35: ce:e8:b0:54:50:3f:3a:84:06:8f:9d:0c:03:72:37:40:5b:f9: 8b:9c:1d:68:b6:7c:d4:4c:a8:d3:30:43:18:c0:c2:6f:9a:0b: f8:98:e8:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA4QkUxMTAvBgNVBAUTKDY0OEU0NzIzNDQ0MTcxQjZBQkUxNkQ3REMwMzBFODlD MDZGMDUwREMwHhcNMjUwODIyMTkxODQ3WhcNMjUwODI5MTkxODQ3WjAYMRYwFAYD VQQDEw02OGE4YzI5Ny0yMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUdiIwOMr5CYQfqnOKDfC4sNm/qdnhY9soyqgeLOuE/cS8KYcRPm31+ZaKSC MusaPKA824uyP8O7B1LLxvWbY7v9gC8vzfUJ4qL9vSJhtahy13NYtM6g0wKAvmcS CSb5nFtaq3Nl02lh5yPGkh9JxlPSxluu1VCthT8DmXzMJGICgiRa8mXWl8DAdn1T myk4wYzfPGd/ytLo7a0tfJ7hpXajB9Zg9Hh0hRzn7eoAVm5wI+S29rRJG+g5XS+T JKYSgdFyXQb7PB4RL10YZCzUOoAplPlg0XzmWXLxEeuOh+n7vLxOLxv84aoyWPdY 1hM76Csws8GWMGfvNOV3LSiC+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHar+f3 mzfA01R4mWry5sQVyCuTMB8GA1UdIwQYMBaAFGSORyNEQXG2q+FtfcAw6JwG8FDc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDhCRS9BMkM4MjdFRTQx MEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNiYXI0VzE5d0REb25BYndV TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJNUhJMFJCY2JhcjRXMTl3RERvbkFid1VOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDhCRS9BMkM4MjdFRTQxMEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNi YXI0VzE5d0REb25BYndVTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+0GPxNqmzqANDMJ7MDPIidicOaXB2WwPqOMyy9gqlRFvkslRraRCD cUkpnTb4mQ5ojP16VHRi6PQyK3kC1820ZWCwMCipkjb2TfG0v6gqduUaKUdv4F2F BuA5R5UhchMIa7TyD70cpSKPyk+nV0TZmbJL96Qqa20gPGHYig1juCxh85otYixt 0WB1x2u6OZA+sEBMXuW++Y5uPts6BhQAHoFuVkfjcBwCQK2TV0W8Yp55h65R1HDA 3cY8aef6Oa1nKSnStC10ot/otSXR4jkMvVqp0EFKgTXO6LBUUD86hAaPnQwDcjdA W/mLnB1otnzUTKjTMEMYwMJvmgv4mOjI -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:31 2025 by rpki-client